CompTIA Security+ (SY0-701)Security Program Management and OversightHard
A company's e-commerce server is valued at $80,000. Security analysts determine that a successful ransomware attack on this server would result in an exposure factor of 25%. What is the single loss expectancy (SLE) for this threat?
- A$80,000
- B$60,000
- C$20,000
- D$25,000
Show answer & explanationAnswer & explanation
Correct answer: C. $20,000
SLE is calculated as Asset Value × Exposure Factor: $80,000 × 0.25 = $20,000.
Why the other options are wrong
- A. This is the full asset value, ignoring the exposure factor entirely.
- B. This value does not correspond to any correct multiplication of the given figures.
- D. This figure confuses the exposure factor percentage with a dollar amount rather than applying it correctly.
Single Loss Expectancy (SLE)
The monetary loss expected from a single occurrence of a risk, calculated as Asset Value multiplied by Exposure Factor (AV × EF).
- Formula: SLE = AV × EF
- Exposure Factor is the percentage of asset value lost in one event
- SLE feeds into ALE when multiplied by Annualized Rate of Occurrence (ARO)
Memory trick: SLE = Single hit, so multiply Asset Value by the damage Percentage.